Mirasys

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Mirasys records in CISA KEV

No Mirasys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mirasys Vms 3 records MEDIUM Dvms Workstation 1 record MEDIUM Video Management System 1 record LOW

Records

5 records

TI-2019-08247 CVE-2019-11031 · GHSA-cr87-f4jc-j7hc

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of…

MEDIUM 46

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01858 Published 2019-08-22 No fix listed CWE-434

TI-2019-08246 CVE-2019-11030 · GHSA-52q9-9c47-7qvq

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the…

MEDIUM 46

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2019-08-22 No fix listed CWE-502

TI-2018-06300 CVE-2018-8727 · GHSA-j23c-2cfm-f3m9

Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an…

MEDIUM 44

Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07948 Published 2018-06-19 No fix listed CWE-22

TI-2019-08245 CVE-2019-11029 · GHSA-p289-qj29-2fvp

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of…

LOW 38

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02488 Published 2019-08-22 No fix listed CWE-22

TI-2017-11205 CVE-2017-15290 · GHSA-rph6-5xp5-mjmr

Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before…

LOW 34

Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data is sent from a server to a client, and not all of this data is required for the…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00749 Published 2017-10-12 No fix listed CWE-319

Open these records in search →

Critical	2
High	3
Medium	0
Low	0
No CVSS	0